Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,561

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,561

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
3ffc8-gs.amazon.cnIn scope2026-11-14
50824-gs.amazon.cnIn scope2026-11-14
aan.amazon.cnIn scope2026-11-14
aax-cn.amazon.cnIn scope2026-11-14
aba.amazon.cnIn scope2026-11-14
accelerator.amazon.cnIn scope2026-11-14
account.amazon.cnIn scope2026-11-14
accounts-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
ads.amazon.cnIn scope2026-11-14
advertising.amazon.cnIn scope2026-11-14
advertising-api.amazon.cnapiIn scope2026-11-14
advertising-api-test.amazon.cnapi, testIn scope2026-11-14
s.advertising.amazon.cnIn scope2026-11-14
dev.fe.s.advertising.amazon.cndevIn scope2026-11-14
dev.hub.s.advertising.amazon.cndevIn scope2026-11-14
img02.s.advertising.amazon.cnIn scope2026-11-14
dev.m.s.advertising.amazon.cndevIn scope2026-11-14
dev.ma.s.advertising.amazon.cndevIn scope2026-11-14
dev.static.s.advertising.amazon.cndevIn scope2026-11-14
alexa.amazon.cnIn scope2026-11-14
alexa-comms-mobile-service.amazon.cnIn scope2026-11-14
alexa-comms-mobile-service-gamma.amazon.cnIn scope2026-11-14
alfbus-director.amazon.cnIn scope2026-11-14
alipay-harbor.amazon.cntoolsIn scope2026-11-14
alx-inbound.amazon.cnIn scope2026-11-14
ams.amazon.cnIn scope2026-11-14
api.amazon.cnapiIn scope2026-11-14
api-amazondevices.amazon.cnapiIn scope2026-11-14
api-amazondevices-cn.amazon.cnapiIn scope2026-11-14
api-cslp-emt.amazon.cnapiIn scope2026-11-14
api-prime.amazon.cnapiIn scope2026-11-14
apx-security.amazon.cnIn scope2026-11-14
ara.amazon.cnIn scope2026-11-14
arap.amazon.cnIn scope2026-11-14
argileto.amazon.cnIn scope2026-11-14
as2-sedi.amazon.cnIn scope2026-11-14
assoc-datafeeds.amazon.cnIn scope2026-11-14
associates.amazon.cnIn scope2026-11-14
atcs-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
atpw-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
avs-idrs.amazon.cnIn scope2026-11-14
aws-ccnw-rp-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-cp-entity-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
a.cdn.console-alpha.aws-dev.amazon.cnadmin, dev, stagingIn scope2026-11-14
aws-fcs-retail-proxy-bjs-gamma.amazon.cnIn scope2026-11-14
aws-fcs-retail-proxy-bjs-prod.amazon.cnIn scope2026-11-14
aws-finx-fda-retail-proxy-cn-north-1-gamma.amazon.cnIn scope2026-11-14
aws-finx-fda-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-finx-frs-retail-proxy-cn-north-1-gamma.amazon.cnIn scope2026-11-14
aws-finx-frs-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-finx-prp-cn-north-1-gamma.amazon.cnIn scope2026-11-14
aws-finx-prp-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-fms-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-jigsaw-service-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-orgs-opxs-preprod.amazon.cnstagingIn scope2026-11-14
aws-p2s-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-retail-proxy-cn.amazon.cnIn scope2026-11-14
aws-signup-service-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
console.aws.amazon.cnadminIn scope2026-11-14
awsmpdisbursementworkflowsretailproxy-bjs-prod.amazon.cnIn scope2026-11-14
basilisk-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
bcp-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
bcs-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
beta-ecs.amazon.cnstagingIn scope2026-11-14
billing-kep.amazon.cnIn scope2026-11-14
billing-kep-eu.amazon.cnIn scope2026-11-14
billing-p2k.amazon.cnIn scope2026-11-14
brandanalytics.amazon.cnIn scope2026-11-14
brandregistry.amazon.cnIn scope2026-11-14
brandservices.amazon.cnIn scope2026-11-14
cookie.browserapps.amazon.cnIn scope2026-11-14
dossier.browserapps.amazon.cnIn scope2026-11-14
feed.browserapps.amazon.cnIn scope2026-11-14
gateway.browserapps.amazon.cnIn scope2026-11-14
horizonte.browserapps.amazon.cnIn scope2026-11-14
identity.browserapps.amazon.cnauthIn scope2026-11-14
mobile-identity.browserapps.amazon.cnauthIn scope2026-11-14
product.browserapps.amazon.cnIn scope2026-11-14
reporter.browserapps.amazon.cnIn scope2026-11-14
storage.browserapps.amazon.cnIn scope2026-11-14
wishlist.browserapps.amazon.cnIn scope2026-11-14
bts-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
c2c.amazon.cnIn scope2026-11-14
carriercentral.amazon.cnIn scope2026-11-14
cas-retail-proxy-cn-north-1-gamma.amazon.cnauthIn scope2026-11-14
cas-retail-proxy-cn-north-1-prod.amazon.cnauthIn scope2026-11-14
catalog-mapper-cn.amazon.cnIn scope2026-11-14
catalog-retail.amazon.cnIn scope2026-11-14
catalog-sc.amazon.cnIn scope2026-11-14
cde-ta-g7g.amazon.cnIn scope2026-11-14
cde-ta-g7g-preprod.amazon.cnstagingIn scope2026-11-14
cde-ta-g7g-sha-proxy.amazon.cnIn scope2026-11-14
cde-ta-g7g-sha-proxy-preprod.amazon.cnstagingIn scope2026-11-14
www.cde-ta-g7g.amazon.cnIn scope2026-11-14
chat.amazon.cnIn scope2026-11-14
chat1.amazon.cnIn scope2026-11-14
client-log.amazon.cnIn scope2026-11-14
cmu-receiver-cn.amazon.cnIn scope2026-11-14
www.cn-amazon-creturns.amazon.cnIn scope2026-11-14
apollo-vip-workflow-router-gamma.cn-amazon.amazon.cnIn scope2026-11-14

90,560 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in